This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ub7cg04r9MK-7NfORT8_8dFr-hA.roa File: ub7cg04r9MK-7NfORT8_8dFr-hA.roa (raw, json) Hash identifier: nX8OroaLFjG5nYxMoDMK7o0xOfk9T8wBJP0OlgpJ9ac= Subject key identifier: B9:BE:DC:83:4E:2B:F4:C2:BE:EC:D7:CE:45:3F:3F:F1:D1:6B:FA:10 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8022206AEBE0596E58549FC6CB4DB0 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ub7cg04r9MK-7NfORT8_8dFr-hA.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198316 IP address blocks: 2a0f:7803:ffe0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:22:20:6a:eb:e0:59:6e:58:54:9f:c6:cb:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9bedc834e2bf4c2beecd7ce453f3ff1d16bfa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:cf:03:73:73:a4:92:46:54:81:89:c6:ee: d2:27:19:d8:6b:cf:22:f6:92:16:4d:f6:25:7a:df: ff:d7:b7:85:52:04:d4:8c:86:2b:44:b0:39:97:c8: f4:ea:3b:1c:03:0d:0a:dd:f2:6e:95:5d:3c:a8:f4: c0:ac:c5:aa:e9:e5:db:09:54:24:d9:12:38:1d:90: 18:65:23:25:1e:e5:05:5c:25:b1:e4:ea:cc:34:30: 40:02:c1:31:cb:e4:0d:5e:fa:e9:c6:74:fa:aa:f9: 66:26:5b:52:ad:75:ec:95:b1:0e:a7:10:d0:2a:bd: 1e:19:54:f6:9c:69:10:cd:1f:c6:c4:9c:de:fd:01: bf:c0:a2:7b:92:9b:ad:c2:31:eb:8c:28:9e:f2:d5: 5b:08:78:98:20:00:bd:bc:ae:9f:9e:6e:7f:17:34: ae:0f:2f:13:48:f6:81:25:71:51:bb:e3:c5:46:01: ab:40:0f:4b:8e:3d:0c:4f:53:ed:2d:db:e9:bf:af: 16:0a:5d:8c:86:f4:46:fd:67:9b:e6:e0:c9:f9:58: 5a:e1:82:22:86:eb:62:1c:8b:3a:98:71:d1:a3:26: 76:17:29:b6:29:c5:56:00:6c:43:30:67:9c:74:8a: 13:0c:6a:36:9f:6b:03:0e:b8:33:7f:5f:6e:24:1e: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:DC:83:4E:2B:F4:C2:BE:EC:D7:CE:45:3F:3F:F1:D1:6B:FA:10 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ub7cg04r9MK-7NfORT8_8dFr-hA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:ffe0::/44 Signature Algorithm: sha256WithRSAEncryption 6f:72:40:6d:57:8a:d3:c7:0c:f9:c9:5b:18:24:18:eb:60:27: a5:2b:be:0a:f9:af:e6:be:08:01:69:79:99:31:3f:85:f1:47: 12:d9:2b:17:c6:9f:69:84:4a:87:79:0d:eb:68:c4:3c:91:00: b7:07:0f:3b:21:f5:d5:2c:d7:ea:80:c0:22:b2:77:96:2b:25: fb:86:8d:34:0b:ed:44:15:af:df:f6:c2:79:d9:66:24:3e:bf: e6:7a:07:07:14:b9:9d:94:d6:44:fe:ba:c4:c5:d5:99:d1:3e: b1:8b:78:ce:d4:f7:95:29:82:ec:42:73:65:fb:9d:8e:7b:e9: 87:c1:d8:f4:e7:4f:4e:30:ec:b0:b9:56:ca:71:61:68:f3:ec: dc:83:d6:4b:83:47:08:49:04:30:69:6a:37:b7:8f:5e:96:e2: d8:bf:a7:0d:9d:d9:bf:86:0c:39:ee:2e:6f:8f:bb:56:fb:6f: 3a:f1:2c:9a:94:83:68:77:cc:1c:8e:48:7d:04:f6:27:fc:79: 70:60:b8:7e:91:1f:e7:1e:52:de:8f:13:e6:40:12:d0:0f:98: 02:c7:ec:74:1e:e1:19:b7:63:24:c0:0c:62:fa:aa:88:3a:d2: 65:65:8f:16:55:36:93:fa:fe:43:26:ed:25:76:81:20:97:da: 02:ef:24:6b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCIgauvgWW5YVJ/Gy02wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJlZGM4MzRlMmJmNGMyYmVlY2Q3Y2U0NTNmM2ZmMWQxNmJmYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJPPA3NzpJJGVIGJxu7SJxnYa88i 9pIWTfYlet//17eFUgTUjIYrRLA5l8j06jscAw0K3fJulV08qPTArMWq6eXbCVQk 2RI4HZAYZSMlHuUFXCWx5OrMNDBAAsExy+QNXvrpxnT6qvlmJltSrXXslbEOpxDQ Kr0eGVT2nGkQzR/GxJze/QG/wKJ7kputwjHrjCie8tVbCHiYIAC9vK6fnm5/FzSu Dy8TSPaBJXFRu+PFRgGrQA9Ljj0MT1PtLdvpv68WCl2MhvRG/Web5uDJ+Vha4YIi hutiHIs6mHHRoyZ2Fym2KcVWAGxDMGecdIoTDGo2n2sDDrgzf19uJB5JTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLm+3INOK/TCvuzXzkU/P/HRa/oQMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvdWI3Y2cwNHI5TUstN05mT1JUOF84ZEZyLWhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A//g MA0GCSqGSIb3DQEBCwUAA4IBAQBvckBtV4rTxwz5yVsYJBjrYCelK74K+a/mvggB aXmZMT+F8UcS2SsXxp9phEqHeQ3raMQ8kQC3Bw87IfXVLNfqgMAisneWKyX7ho00 C+1EFa/f9sJ52WYkPr/megcHFLmdlNZE/rrExdWZ0T6xi3jO1PeVKYLsQnNl+52O e+mHwdj0509OMOywuVbKcWFo8+zcg9ZLg0cISQQwaWo3t49eluLYv6cNndm/hgw5 7i5vj7tW+2868SyalINod8wcjkh9BPYn/HlwYLh+kR/nHlLejxPmQBLQD5gCx+x0 HuEZt2MkwAxi+qqIOtJlZY8WVTaT+v5DJu0ldoEgl9oC7yRr -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:56 2026 by rpki-client